SOC2C

Is this your company? Buyers are checking Co Flo here. Claim co-flo.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free
Co Flo logo

Co Flo

Trust level
Listed
Unverified

Sourced from public information. Not yet verified by the company.

Co Flo is SOC 2 compliant. Co Flo also holds ISO 27001.

Framework
SOC 2
Auditor
Last report
Renewal
View official trust center ↗

About

Welcome to the Co-Flo Enterprise Trust Center, a central location for all our privacy and compliance materials. Trust Center is provided to both our customers and prospects with varying levels of access to better facilitate information security and compliance discussions and provide a level of transparency reserved for organisations that live and breathe risk management. Additionally, we invite you to subscribe for updates to stay informed about the latest advancements in our security and compliance initiatives.

Compliance & infrastructure

Hosting
Azure

Documents

11

Subprocessors

6
  • i
    iManage · Document Management System, Cloud-based collaboration and knowledge work solutio
    iManage operates globally
  • M
    Microsoft Azure · Cloud infrastructure provider; Data center and hosting services.
    Microsoft Azure operates data centers in multiple regions worldwide. The specific data center used will depend on customer configuration and regional compliance requirements.
  • A
    Atlassian (Jira) · Customer Support, project and issue tracking
    Atlassian processes data in accordance with its Data Residency options. Customers can select preferred data residency regions based on compliance needs.
  • P
    Pendo.io · Product analytics and digital adoption platform
    Pendo primarily processes data in the United States.
  • U
    Unleash · Feature management and deployment control platform
    Unleash utilizes Amazon Web Services (AWS) for hosting, with data centers located in: Europe (Frankfurt) United States (US-East) The specific AWS region used depends on customer selection
  • B
    Beamer · Product analytics and user engagement platform
    United States – Data is processed and hosted in Pendo.io’s infrastructure located in the U.S.

Compliance leadership

The person who leads Co Flo's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. Co Flo's penetration test vendor isn't listed yet.

Claim this profile to add it.

This listing is partial

6/11 details · 55%

SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

  • Auditorraises trust
    Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
  • Report dateraises trust
    Add your most recent report period so buyers see how current your SOC 2 is.
  • Renewal date
    Add your renewal window so buyers know your coverage is active.
  • Other certifications
    List your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
  • Security controls
    Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is Co Flo SOC 2 compliant?
Co Flo is SOC 2 compliant. On SOC2C this listing is Listed.
Is Co Flo ISO 27001 certified?
According to Co Flo's public trust center, Co Flo is ISO 27001 certified. On SOC2C this listing is Listed.
Can I use Co Flo's SOC 2 for a vendor risk assessment?
Yes. Co Flo's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Co Flo penetration tested?
Co Flo hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Does Co Flo have an ISO 27001 certificate?
Co Flo publishes an ISO certificate on its trust center; you can request access through SOC2C.